esp@cenet document view 



1/1 s<— V 



METHOD FOR MONITORING FUNCTIONALITY OF SYSTEM, MONITORING 
DEVICE THEREFOR, MEMORY CELL AND COMPUTER PROGRAM 



Publication number 

Publication date: 

Inventor: 

Applicant: 

Classification: 
- international: 



- European: 
Application number: 
Priority number(s): 



JP2003076582 
2003-03-14 

LOEHR DIETHARD; STROMMER AXEL 
BOSCH GMBH ROBERT 

G06F11/30; B60L11/18; G01R31/36; G05B23/02; 
F02D41/24; F02D41/26; G06F11/30; B60L11/18; 
G01R31/36; G05B23/02; F02D41/00; (IPC1-7): 
G06F 11/30 

B60L11/18M; G01R31/36V1 A; G05B23/02 
JP20020181990 20020621 

DE20011031298 20010627; DE20021020811 20020510 



Also published as: 

g US6901350 (B2) 
m US2003023407 (A 
W FR2826744 (A1) 



Report a data error he 



Abstract of JP2003076582 

PROBLEM TO BE SOLVED: To simply and 
easily monitor functionality of a system provided 
with complicated functions without depending on 
hardware. SOLUTION: The function according to 
stipulations of the system is divided into at least 
one sub system function hierarchically 
corresponding to complication of the function and 
the sub system function is divided into at least 
one function unit further. Also, a method is 
structured as the following: one of the function 
units of the system 1 is inspected by considering 
an input signal and/or an output signal of the 
function unit inside a first monitoring layer; the 
function unit is inspected by considering the input 
signal and/or output signal of the sub system 
corresponding to the function unit further inside a 
second monitoring layer; the function unit is 
inspected by considering the input signal and/or 
output signal of the system further inside the 
other monitoring layer. 
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(54) METHOD FOR MONITORING FUNCTIONALITY OF SYSTEM, MONITORING 
DEVICE THEREFOR, MEMORY CELL AND COMPUTER PROGRAM 

(57)Abstract: 

PROBLEM TO BE SOLVED: To simply and easily 
monitor functionality of a system provided with 
complicated functions without depending on 
hardware. 

SOLUTION: The function according to stipulations of 
the system is divided into at least one sub system 
function hierarchically corresponding to complication 
of the function and the sub system function is divided 
into at least one function unit further. Also, a method 
is structured as the following: one of the function units 
of the system 1 is inspected by considering an input 
signal and/or an output signal of the function unit 
inside a first monitoring layer; the function unit is 
inspected by considering the input signal and/or 

output signal of the sub system corresponding to the function unit further inside a second 
monitoring layer; the function unit is inspected by considering the input signal and/or 



ui 



output signal of the system further inside the other monitoring layer. 
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* NOTICES * 

JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect the 
original precisely. 

2. **** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



CLAIMS 

[Claim(s)] 

[Claim 1]A system a subsystem arranged at at least one low rank. Are the component part 
of a system which has and/or has been arranged at a higher rank, and have said system, 
and an element realized by hardware containing a sensor, an actor, and/or a functional 
computer an input signal of said system, an output signal, and at least one functional unit. 
Are the method of supervising the functionality of a system by inspecting, and a function 
according to regulation of said system, According to complexity of said function, it is divided 
into at least one subsystem function hierarchical, and said subsystem function is further 
divided into at least one functional unit, and said method as follows, the [ which is 
structurized / :-] - one of the functional units of a system within a surveillance layer of one, 
and said 1st surveillance layer in consideration of an input signal and/or an output signal of 
said functional unit. Within the 2nd surveillance layer arranged at a higher rank of a 
surveillance layer of the - above 1st inspected, and said 2nd surveillance layer, said 
functional unit, Within other at least one surveillance layer arranged at a higher rank of a 
surveillance layer of the - above 2nd inspected in consideration of an input signal and/or an 
output signal of a subsystem which were matched with said functional unit, and a 
surveillance layer besides the above, functional YUNITSU. A monitor method of the 
functionality of a system characterized by what TO is further inspected for in consideration 
of an input signal and/or an output signal of said system. 

[Claim 2]ln an inspection of said functional unit, an input signal and/or an output signal of a 
functional unit, a subsystem, and/or a system exceed the maximum, Or a thing for which it 
performs by being inspected about it being less than the minimum, and/or inclination of an 
input signal and/or an output signal exceeds the maximum, Or a monitor method of the 
functionality of the system according to claim 1 characterized by what is performed by 
being inspected about it being less than the minimum. 

[Claim 3]Express a safe risk of functionality with the error exceeding a marginal risk which 
can be set up beforehand, and also [ safe ] a functional unit of said system which should be 
supervised An important functional network, A monitor method of the functionality of the 
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system according to claim 1 or 2 characterized by what is divided into other functional 
networks showing a safe risk that functionality with said error is smaller than a marginal risk 
or equal. 

[Claim 4]a case where the functionality of said functional network has an error - said - safe 

- the upper - or an important functional network has functionality with an error - or - said - 

- others - a functional network has - **** » a monitor method of the functionality of the 
system according to claim 3 characterized by what it responds and a substitute means is 
chosen for. 

[Claim 5]A monitor method of the functionality of the system according to claim 4 
characterized by what said substitute means has an extraordinary drive and/or 
extraordinary interception for. 

[Claim 6]Said monitor method is a monitor method of the functionality of a system given in 
any 1 paragraph among claims 1,2,3, and 4 characterized by what is applied to all the 
functional units of said system, or the 5th paragraph. 

[Claim 7]A monitor method of the functionality of the system according to claim 6 
characterized by what functionality as order of said system is checked for when all the 
functional units of said system are functioning as order. 

[Claim 8]A system is the component part of a system which has a subsystem arranged at at 
least one low rank, and/or has been arranged at a higher rank, and said system, By 
inspecting an input signal of said system which has the element realized by hardware 
containing a sensor, an actor, and/or a functional computer, an output signal, and at least 
one functional unit, Are the method of supervising the functionality of a system and a 
function according to regulation of said system, it being divided into at least one subsystem 
function, and being further divided into at least one functional unit hierarchical, according to 
complexity of said function, - the [ and / - ] - within a surveillance layer of one, One of the 
functional units of a system within the 2nd surveillance layer that was inspected in 
consideration of an input signal and/or an output signal of said functional unit, and has been 
arranged at a higher rank of a surveillance layer of the - above 1st, Within other at least one 
surveillance layer which said functional unit was further inspected in consideration of an 
input signal and/or an output signal of a subsystem which were matched with said 
functional unit, and has been arranged at a higher rank of a surveillance layer of the - 
above 2nd, A method of surveillance of the functionality of a system characterized by what 
said functional unit is further inspected for in consideration of an input signal and/or an 
output signal of said system. Law. 

[Claim 9]A memory device for a device which supervises the functionality of a system 
characterized by what a computer program which can enforce a method of a statement is 
stored in any 1 paragraph for among the 7th paragraph from claim 1 [Claim 10]A computer 
program characterized by what is made for any 1 paragraph of the 7th paragraph to enforce 
a method of a statement from claim 1 to a computer. 

[Claim 1 1]The computer program according to claim 10 characterized by what said 
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computer program is stored in a memory device for. 

[Claim 12]A system a subsystem arranged at at least one low rank. Are the component part 
of a system which has and/or has been arranged at a higher rank, and have the element 
realized by hardware containing a sensor, an actor, and/or a functional computer, and in 
that case an input signal of said system, an output signal, and at least one functional unit. 
Are a device which has a means to inspect and which supervises the functionality of a 
system, and a function according to regulation of said system, According to complexity of 
said function, it is divided into at least one subsystem function, and is further divided into at 
least one functional unit hierarchical, and and said device, The following, i.e., :, - means [ of 
the 1st surveillance layer that inspects one of the functional units of said system in 
consideration of an input signal and/or an output signal of said functional unit ]; 
- A means of the 2nd surveillance layer arranged at a higher rank of said 1st surveillance 
layer to inspect said functional unit further in consideration of an input signal and/or an 
output signal of a subsystem which were matched with said functional unit, - A monitoring 
instrument of the functionality of a system characterized by what it has a means of other at 
least one surveillance layer for arranged at a higher rank of the 2nd surveillance layer 
which inspects said functional unit in consideration of an input signal and/or an output 
signal of said system further. 



[Translation done.] 
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* NOTICES * 

JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

1 This document has been translated by computer. So the translation may not reflect the 
original precisely. 

2.**** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



DETAILED DESCRIPTION 

[Detailed Description of the Invention] 
[0001] 

[Field of the lnvention]More particularly, this invention relates to the monitor method of the 
functionality of the system by inspecting the input signal of a system, an output signal, and 
at least one functional unit, etc, about the monitor method of the functionality of a system, 
its monitoring instrument, a memory device, and a computer program. 
[0002] 

[Description of the Prior Art]ln the former, in order to guarantee the exact functionality of a 
system, it is known to use the input signal, output signal, and functional unit of a system. 
[0003]For example, the monitor method of the functionality of a power controller is indicated 
from DE41 14999A1. Within the microcomputer of a control device, the function according to 
regulation of the control device is carried out. The function which followed the same 
regulation within the monitoring instrument in parallel is selectively carried out at least to it. 
The output signal of a microcomputer and a monitoring instrument is compared mutually, 
and it is judged according to the result of this comparison whether the control device is 
functioning correctly. When functionality with the error of a control device is detected, the 
substitute means according to it is carried out. 

[0004]lt depends for the monitor method proposed in this gazette on the hardware of the 
system which should be supervised remarkably, and is extremely inflexible. The monitor 
method proposed cannot be easily enforced within the control device of the others which 
have a function according to other regulations. That is, all the monitor methods performed 
within a monitoring instrument must be repaired, and the function in which other control 
devices were changed must be made to suit. As for structural repair of a monitor method, 
this is contained. 

[0005]The monitor method of the functionality of a control device is indicated from 
DE4438714A1. The microcomputer of the control device is divided into the functional flat 
surface, the surveillance flat surface, and the control flat surface. The function as regulation 
of a control device is carried out in a functional flat surface. In a surveillance flat surface, 
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the carried-out function is inspected, for example using threshold comparison or a 
probability inspection, in a surveillance flat surface, the function (all) according to regulation 
of the control device is not carried out, but only a monitoring function is carried out. 
Nevertheless, in order to enable detection of a function with the error of a system with 
sufficient reliability, The additional control flat surface is established, the element (for 
example, a memory device or a microprocessor) realized by the hardware of the system in 
the flat surface is tested, and the right functionality of a microcomputer is inspected using 
question-response-communication. 

[0006]Also in the monitor method proposed by this gazette, it is dependent on the hardware 
of the system which the structure of a method should supervise, and there is a problem of 
not being very flexible. In order to enable it to move to other control devices which have the 
function which followed other regulations in the monitor method, after repairing thoroughly 
first also in the monitor method proposed by this gazette, new hardware and software 
conditions must be made to suit However, this is troublesome and a high cost. 
[0007]The concepts of the system in this specification are arbitrary control devices, 
especially a vehicle control device, for example. The system is formed, for example as a 
control device for electric battery management (EBM). The system has a subsystem and 
the subsystem is formed as ASIC (Application Specific Integrated Circuit) or a current 
sensor, for example as a computer unit. The system has the unit formed, for example as an 
EBM-algorithm or a battery simulation, and a portion which includes calculation or the 
arbitrary mathematical functions of generator target voltage, or the function of trigonometry, 
for example. An EBM-control device is the component part of the system of the form of 
vehicles arranged at the higher rank. The system of everything but plurality in vehicles 
further other than an EBM-control device, for example, an engine control system and a 
transmission controller, is formed. 
[0008] 

[Problem(s) to be Solved by the lnvention]Since it is only dependent on the hardware of a 
system, the structure of the monitor method of the functionality of the system of known 
[ gazettes / above-mentioned / both ] is unrelated to the complexity of the function carried 
out by the system which should be supervised. In order that this method may supervise the 
function to have high complexity, when being used, a method is theoretically used as a 
gazette at the structure as written. However, when the complexity of the function carried out 
by the system which should be supervised as regulation increases, the structure of a 
monitor method also has the problem that it becomes more complicated and an 
understanding becomes difficult increasingly. 

[0009]Thus, the surveillance concept indicated in the gazette is not suitable for a 
complicated function. In particular, the error generated in the error case cannot be matched 
with the predetermined function of a system in a known surveillance concept. For this 
reason, error diagnosis and selection of a suitable alternate function become difficult 
clearly. 
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[0010]Therefore, the purpose of this invention is in new and the thing [ that it is possible to 
supervise the functionality of the system which has a complicated function simply and 
easily ] for which the monitor method of the functionality of the improved system, its 
monitoring instrument, a memory device, and a computer program are provided, without 
being dependent on hardware. 
[0011] 

[Means for Solving the Problem]ln [ in order to solve an aforementioned problem ] the 1st 
viewpoint of this invention, A system (1) is the component part of a system (6) which has a 
subsystem arranged at at least one low rank, and/or has been arranged at a higher rank, 
and and said system (1), By having the element realized by hardware containing a sensor 
(4), an actor (5), and/or a functional computer (2), and inspecting an input signal of said 
system (1), an output signal, and at least one functional unit, Are the method of supervising 
the functionality of a system (1), and a function according to regulation of said system (1), 
the [ by which it is divided into at least one subsystem function hierarchical according to 
complexity of said function, said subsystem function is further divided into at least one 
functional unit, and said method is structurized as follows / :-] - a surveillance layer (U0) of 
one. The 2nd surveillance layer arranged at a higher rank of a surveillance layer (U0) of the 
- above 1st in which one of the functional units of a system (1) is inspected within said 1st 
surveillance layer in consideration of an input signal and/or an output signal of said 
functional unit (U1), A subsystem with which said functional unit was further matched with 
said functional unit within said 2nd surveillance layer. Other at least one surveillance layer 
which is inspected in consideration of ********** and/or an output signal and which has been 
arranged at a higher rank of a surveillance layer (U1) of the - above 2nd (U2 - Un), A 
monitor method of the functionality of a system characterized by what a functional unit is 
further inspected for in consideration of an input signal and/or an output signal of said 
system (1) is provided within a surveillance layer besides the above. 
[0012]ln an invention of the above-mentioned statement, it can be used in order to 
supervise a system by which very various complexity differs extensible easily, since a 
monitor method is constituted in the shape of modular one. Since between realization by 
hardware of a function of a system which should be supervised, and realization by software 
is not distinguished in principle, structure of a monitor method can be used universally. 
Since structure of a monitor method is purely defined based on a functional unit of a 
system, it depends for it also on complexity of a function (for example, an open loop control 
function or a closed-loop-control function) carried out by a system which should be 
supervised as regulation. 

[0013]moreover - since a monitor method is made into the shape of modular one and it is 
structurized, a monitor method is clear as a whole -- an understanding - an easy structure 
is acquired and it is accepted in a user final more mostly. An error to generate can be 
matched with a predetermined surveillance layer easily and uniquely, and it can match with 
a various function unit especially inside a surveillance layer. This is obtained by separating 
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mutually an error of a various function unit of the same surveillance layer. By this, search of 
a cause of an error can be simplified remarkably and it can accelerate remarkably. 
Accuracy and certainty of error search are improved. It is preferred to structurize a monitor 
method of a system vertically. 

[0014]Various monitor methods are mentioned how a function should be concretely 
supervised within each surveillance layer. An element realized by hardware can be 
supervised, for example via a watch dog, a core test, or other monitor modules. 
[0015]A function based on regulation of a system which should be supervised is divided 
into two or more stratum functionale according to complexity of a function. An original 
system function is provided more in a higher rank. A system function is an electronic battery 
management (EBM)-function, for example. A system function is divided into at least one 
subsystem function, for example, is formed as a function of a microcomputer or a current 
sensor. In a selected example/a system function and a subsystem function are realized by 
hardware. However, choosing an example realized by software is also easily considered 
about these functions. 

[001 6]A subsystem function is further divided into at least one functional unit, and it as 
software function nature (for example, a battery simulation, quiescent-current management 
(RSM), or dynamic energy management (DYN)), Or it is formed as hardware functionality 
(for example, current measurement, an amplitude measurement). According to complexity 
of a function according to regulation of each system, this division is continued still more 
nearly arbitrarily by adding other stratum functionale. That is, a functional unit can be 
further divided into at least one partial function, and it can be formed in an example of 
dynamic energy management as a function of mathematical or trigonometry [ being easy ], 
or generator target voltage calculation. 

[0017]Complexity of surveillance increases from the 1st surveillance layer from a layer to a 
layer as **. In the 1st surveillance layer, a functional unit of a system is supervised using an 
input signal and/or an output signal (namely, functional unit considered) of a consideration 
unit. In the 2nd surveillance layer, a functional unit is supervised using other input signals 
and/or output signals of a functional unit inside a subsystem with which a functional unit 
considered is matched further. In the 3rd surveillance layer, a functional unit of a system is 
further supervised using other input signals and/or output signals of a subsystem inside a 
system. 

[0018]When a system function has the stratum functionale of further others under the 1st 
stratum functionale (for example, partial function of a lower part of a functional unit), in the 
1st surveillance layer, a partial function of a system is supervised using an input signal 
and/or an output signal (namely, partial function considered) of a consideration unit. In the 
2nd surveillance layer, a partial function of a system is supervised using other input signals 
and/or output signals of a partial function inside a functional unit in which a partial function 
considered is matched further. In the 3rd surveillance layer, a partial function is supervised 
using other input signals and/or output signals of a functional unit inside a subsystem with 
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which a partial function considered is matched further. In other 4th surveillance layer, a 
partial function is further supervised using other input signals and/or output signals of a 
subsystem inside a system. Therefore, structure of a monitor method based on this 
invention also becomes so complicated, so that structure of a function of a system 
becomes complicated, respectively. 

[0019]By being inspected about an input signal and/or an output signal of a functional unit, 
a subsystem, and/or a system exceeding the maximum, or an inspection of said functional 
unit being less than the minimum, it performs by being inspected about performing, 
inclination of an input signal and/or an output signal exceeding the maximum, or it being 
less than the minimum - it needs — constituting is preferred. 

[0020]A functional unit of said system (1) which should be supervised, a safe risk of 
functionality with the error exceeding a marginal risk which can be set up beforehand is 
expressed - safe - the upper - it is divided into an important functional network and other 
functional networks showing a safe risk that functionality with said error is smaller than a 
marginal risk or equal - it needs - constituting is preferred. On safe, in an important 
functional network, in order to guarantee safety of a system, introduction or a suitable 
interception strategy of a reaction quick enough and positive enough, for example, an 
alternate function, is required. In other functional networks, in order to react suitably, when 
there is sufficient time or an alternate function goes wrong, the state of threatening safety of 
a system does not arise. 

[0021]safe, when the functionality of said functional network has an error - the upper - a 
substitute means is chosen according to whether an important functional network has 
functionality with an error, or other functional networks are so - it needs - constituting is 
preferred. 

[0022]said substitute means has an extraordinary drive and/or extraordinary interception -- 
it needs — it can constitute. 

[0023]said method is applied to all the functional units of said system (1) - it needs - 
constituting is preferred. This means that each functional unit of a system is inspected by a 
monitor method structurized [ above-mentioned ]. Thus, positive explanation about the 
functionality of the whole system can be given. 

[0024]when all the functional units of said system are functioning as order, functionality as 
order of said system (1) is checked - it needs, if constituted, When one of the inspected 
functional units is not functioning as order, the whole system is immediately recognized that 
there is an error. A suitable substitute means is chosen as an error case, and it carries out. 
a consideration unit (functional unit) in which a substitute means has an error in addition - 
- or - instead, it can carry out. 

[0025]ln [ in order to solve an aforementioned problem ] the 2nd viewpoint of this invention, 
A system (1) is the component part of a system (6) which has a subsystem arranged at at 
least one low rank, and/or has been arranged at a higher rank, and said system (1), By 
inspecting an input signal of said system (1) which has the element realized by hardware 
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containing a sensor (4), an actor (5), and/or a functional computer (2), an output signal, and 
at least one functional unit, Are the method of supervising the functionality of a system (1), 
and a function according to regulation of said system (1), it being divided into at least one 
subsystem function, and being further divided into at least one functional unit hierarchical, 
according to complexity of said function, - the [ and / - ] - within a surveillance layer (UO) of 
one, One of the functional units of a system (1) takes into consideration an input signal 
and/or an output signal of said functional unit. It is inspected.; - within the 2nd surveillance 
layer (U1) arranged at a higher rank of said 1st surveillance layer (UO), said functional unit 
is further inspected in consideration of an input signal and/or an output signal of a 
subsystem which were matched with said functional unit - the [;-] - at least one others 
arranged at a higher rank of a surveillance layer (U1) of two. Within a surveillance layer (U2 

Un), a monitor method of the functionality of a system characterized by what said 
functional unit is further inspected for in consideration of an input signal and/or an output 
signal of said system (1) is provided. 

[0026]ln an invention of the above-mentioned statement, it can be used in order to 
supervise a system by which very various complexity differs extensible easily, since a 
monitor method is constituted in the shape of modular one. Since between realization by 
hardware of a function of a system which should be supervised, and realization by software 
is not distinguished in principle, structure of a monitor method can be used universally. 
[0027]ln [ in order to solve an aforementioned problem ] the 3rd viewpoint of this invention, 
A memory device for a device which supervises the functionality of a system (1) 
characterized by what a computer program which can enforce a method of a statement is 
stored in any 1 paragraph for among claims 1-7 is provided. A computer program is stored 
on a memory device and especially the computer program can enforce a method which can 
be performed on a microprocessor and starts this invention on a computing device. An 
electric memory medium, for example, read-only memory, random access memory, or a 
flash memory can be especially used as a memory device. 

[0028]ln order to solve an aforementioned problem, in the 4th viewpoint of this invention, a 
computer program which makes any 1 paragraph of claims 1-7 enforce a method of a 
statement is provided to a computer. 

[0029]said computer program is stored in a memory device (3) - it needs - it is effective, if 
are constituted and it is especially stored on read-only memory, random access memory, or 
a flash memory. 

[0030]ln [ in order to solve an aforementioned problem ] the 5th viewpoint of this invention, 
A system is the component part of a system (6) which has a subsystem arranged at at least 
one low rank, and/or has been arranged at a higher rank, and And a sensor (4), An actor 
(5) and/or a functional computer (2). An element realized by included hardware. Have and 
in that case Said system. An input signal of (1), an output signal. And a function which is a 
device which has a means to inspect at least one functional unit, and which supervises the 
functionality of a system (1), and followed regulation of said system (1), According to 
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complexity of said function, it is divided into at least one subsystem function, and is further 
divided into at least one functional unit hierarchical, and and said device, The following, i.e., 
:, - one of the functional units of said system (1) in consideration of an input signal and/or 
an output signal of said functional unit. Means of the 1st surveillance layer (UO) to inspect; - 
An input signal and/or an output signal of a subsystem which were further matched with 
said functional unit in said functional unit are taken into consideration, a means of the 2nd 
surveillance layer (U1) arranged at a higher rank of said 1st surveillance layer (UO) to 
inspect, and - a pan said functional unit. A monitoring instrument of the functionality of a 
system characterized by what it has a means of other at least one surveillance layer (U2 -- 
Un) arranged at a higher rank of the 2nd surveillance layer (U1) to boil and to inspect in 
consideration of an input signal and/or an output signal of said system (1) for is provided. 
[0031]ln an invention of the above-mentioned statement, it can be used in order to 
supervise a system by which very various complexity differs extensible easily, since a 
monitor method is constituted in the shape of modular one. Since between realization by 
hardware of a function of a system which should be supervised, and realization by software 
is not distinguished in principle, structure of a monitor method can be used universally. A 
means of various layers is realizable with hardware or software. They have a watch dog, a 
core test, or other monitor modules, for example. In order to inspect about exceeding the 
maximum for various input signals and/or an output signal, or it being less than the 
minimum, these means can also have a comparator. The means can have inclination 
means forming and it inspects about whether a comparator exceeds the maximum for 
inclination of an input signal and/or an output signal in that case, or it is less than the 
minimum. 
[0032] 

[Embodiment of the lnvention]The suitable embodiment of this invention is described in 
detail, referring to an accompanying drawing below. In this specification and a drawing, 
duplication explanation is omitted by attaching the same numerals about the component 
which has the same functional constitution substantially. 

[0033](A 1st embodiment) Based on drawing 1 , the monitoring instrument of the 
functionality of the system concerning this embodiment is explained first. Drawing 1 is a 
block diagram showing the composition of the monitoring instrument of the functionality of 
the system concerning this embodiment. 

[0034]First, as shown in drawing 1 , the monitoring instrument of the functionality of the 
system concerning this embodiment shows the system 1 formed as a control device. The 
functionality concerning this embodiment can be supervised by this system. The control 
device 1 has the memory device 3, and the memory device is especially formed as read- 
only memory (EPROM) possible [ elimination ] and programmable as a desirable electric 
memory medium. 

[0035]On the memory device 3, when it performs on the computing device 2 of the control 
device 1 , the suitable computer program to enforce the monitor method concerning this 
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embodiment is stored. Especially the computing device 2 is formed as a microprocessor. In 
order to carry out a computer program on the computing device 2, a program is all 
transmitted to the computing device 2 from the memory device 3 according to instructions. 
[0036]ln the computer program, vertical structure of the monitor method concerning an 
embodiment is transplanted as follows (namely, a method following the complexity of the 
system 1 two or more surveillance layers UO, U1, U2 - it is divided into Un like). 
[0037]The control device 1 acquires the input signal of the sensor 4, and outputs an output 
signal to the actor 5. In filling the function according to regulation of the control device 1, an 
output signal is generated within limits which process an open loop and/or closed loop 
control within the microprocessor 2. Similarly, an open loop control and/or a closed loop 
control program can be stored in the memory device 3 of the control device 1, and can be 
loaded in the microprocessor 2 according to the instructions as the whole for processing. 
The computer program for enforcing the monitor method concerning this embodiment can 
be unified to an open loop control and/or a closed loop control program, and a common 
program. 

[0038]Next, the monitor method of the functionality of the system concerning this 
embodiment is explained based on drawing 2 - drawing 8 . The monitor method of the 
functionality of the system concerning this embodiment is vertically structurized according 
to the complexity of a function according to regulation of the system which should be 
supervised. The function according to regulation of the system is an open loop control 
function or a closed-loop-control function, for example. The structure concerning this 
embodiment is unrelated to the hardware of a system, and very flexible. 
[0039]lt decomposes into the element and the function according to regulation of the 
system 1 which should be supervised is considered. The smallest unit of the system 1 is 
shown as a functional element, and it is it. - It is supervised by the - monitoring function UF 
when required. However, it is also possible to carry out in the module which does not need 
to perform surveillance within the smallest unit and consists of two or more functional 
elements. 

[0040]First, as shown in drawing 2 , the system arranged at the higher rank of the form of 
vehicles is shown by the numerals A. The system A arranged at the higher rank has various 
systems and an electric battery management (EBM)-control device especially shown by 
AA. 

[0041]The system AB of further the others besides the EBM-control device AA is also the 
component part of the vehicles A. Other systems AB are formed, for example as an engine 
control system or a transmission controller. The EBM-control device AA is divided into the 
two subsystems AAA and AAB, and they are formed as the computing device 2 or the 
memory device 3. Other systems AB are divided into the subsystems ABA and ABB. 
[0042]The subsystems AAA and AAB are divided into further two or more units AAAA, 
AAAB, and AABA and AABB(s). Similarly, it corresponds also to the subsystems ABA and 
ABB of other systems AB. The units AAAA, AAAB, and AABA and AABB are formed as 
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dynamic energy management (DYN), for example as quiescent-current management 
(RSM). 

[0043]lt is divided into the units AAAA, AAAB, and AABA, the AABB itself, and various 
portions. The unit AAAA is divided into the portions AAAAA, AAAAB, and AAAAC, and the 
unit AAAB is divided into the portions AAABA, AAABB, and AAABC. Similarly, the unit 
AABA is divided into the portions AABAA, AABAB, and AABAC, and the unit AABB is 
divided into the portions AABBA, AABBB, and AABBC. Similarly, it corresponds also to 
other units ABAA, ABAB, and ABBA and ABBB(s) of the subsystems ABA and ABB of the 
system AB. A unit has generator voltage calculation, for example. 
[0044]Therefore, the function according to regulation of the system AA which should be 
supervised is divided into two or more stratum functionale according to the complexity of a 
function. The original control facility is extremely provided in the higher rank (inside of the 
system AA). A system function is an electronic battery management (EBM)-function, for 
example. The system function is divided into at least one subsystem function (subsystems 
AAA and AAB), and it is formed as a function of a microcomputer or a current sensor. 
[0045]The subsystem function is divided into at least one functional unit again, respectively 
(to the units AAAA, AAAB, and AABA and AABB), and it as software function nature (a 
battery simulation, quiescent-current management, or dynamic current management). It is 
formed. According to the complexity of the function of a system, this division is continued 
still more nearly arbitrarily respectively. Namely, a functional unit can be further divided into 
at least one partial function (to the portions AAAAA, AAAAB, and AAAAC, AAABA, AAABB, 
AAABC, AABAA, AABAB, AABAC, AABBA, AABBB, and AABBC), In dynamic current 
management, it is formed as the function of simple trigonometry, or generator target voltage 
calculation. 

[0046]Next, the layer model which has various surveillance layers which start this 
embodiment based on drawing 8 from drawing 3 is explained. Drawing 3 is an explanatory 
view showing the layer model of the monitor method concerning this embodiment. As for 
the layer model of the monitor method concerning this embodiment, the complexity of 
surveillance increases from a layer to a layer as the 1st surveillance layer (lower part) UO to 

[0047]As shown in drawing 3 , the method concerning this embodiment is started in this 
functional structure of the function according to regulation of the systems AA and AB. From 
the unit of the system AA predetermined in the method concerning this embodiment to **** 
[0048]This is the partial function AAABA, as shown in drawing 4 . In the 1st surveillance 
layer UO, the partial function AAABA uses the input signal 6 and/or the output signal 7 of 
this partial function AAABA, and is inspected by the monitoring function UF AAABA 
matched with this partial function. 

[0049]ln the 2nd surveillance layer U1 arranged at the higher rank of the 1st surveillance 
layer UO, As shown in drawing 5 , the partial function AAABA is further inspected by other 
input signals 8 and/or output signals 9 of the partial function AAABB of functional unit AAAB 
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(the partial function AAABA considered is matched with this). Other partial functions 
AAABB are a part of same functional unit AAAB(s) as the partial function AAABA 
considered. 

[0050]Within the 3rd surveillance layer U2 arranged at the higher rank of the 2nd 
surveillance layer U1 , As shown in drawing 6 , the partial function AAABA is further 
inspected using the different input signal 10 and/or the output signal 1 1 of functional unit 
AAAA from functional unit AAAB (the applicable partial function AAABA is matched with 
this). Functional unit AAAA(s) are some subsystems AAA, and the partial function AAABA 
considered is matched with this subsystem. 

[0051]Within the 4th surveillance layer U4 arranged at the higher rank of the 3rd 
surveillance layer U2, As shown in drawing 7 , the partial function AAABA is inspected using 
the different input signal 12 and/or the output signal 13 of the subsystem AAB from the 
subsystem AAA with which the partial function AAABA considered is matched further. The 
subsystems AAB are some systems AA and the partial function AAABA considered is 
matched with this system AA. 

[0052]The supervisory sequence which two or more monitoring functions UF pass can be 
prepared in the part of the center for these monitoring functions UF. All the monitoring 
functions UF are provided with this supervisory sequence by it, for example for error 
memory entry. Each monitoring function UF can inspect the predetermined basic function 
nature (for example, drive excess voltage recognition) of a functional unit, and can reuse it 
for other monitoring functions UF without big time and effort. For example, the 
communications protocol of the one monitoring function UF can be reused in other 
monitoring functions UF, and the various monitoring functions UF exchange data of each 
other via the communications protocol. 

[0053]The monitor method concerning this embodiment can be used on arbitrary systems. 
The error generated by a case is separated from various functional units of the same 
surveillance layer. When looking for the cause of an error by this, the source of an error can 
be searched for more easily. The monitor method concerning this embodiment can match 
an error with each surveillance layer, therefore the functional unit of the system 1 clearly 
easily. Since only an input signal and/or an output signal are supervised within each 
surveillance layer, as compared with conventional technology, few [ as a whole ] sources of 
an error based on surveillance are provided, and the source of an error can also be 
searched for simply and correctly eventually. 

[0054]The minimum request to the surveillance of the system 1 is being able to recognize 
whether it having stopped when having acted, as the system's 1 has already been 
standardized (Specification). When ideal, the system 1 can guarantee being standardized 
even when an error occurs, and acting further. This is premised on redundancy existing and 
the redundancy is realized only in the system classified as it is a safe overlay important 
point from the reasons of cost. Therefore, in many cases, surveillance is limited by 
recognizing whether it stopped when having acted, as the system 1 has already been 
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standardized in all the remaining systems 1. 

[0055]ln this relation, standardization is the sum total of all the requests set as the system, 
a request - for example - "~ the safety at the time of breaking down. (Fail-safe: Fail-safe) 
Suppose are are [ "error permissible error (fault-tolerance)" "] functional safety (functiona 
safetey), or "a function is possible for a control device for not being restricted about the 
driver voltage between 6V and 20V." 

[0056]Like [ since these requests differ about each system ] the method concerning this 
embodiment, the universally effective surveillance concept is characterized by the ability to 
use it for various systems which have various requests flexibly. This needs the functional 
structure according to it, and the functional structure can use a surveillance element for 
those systems, even when satisfying the request from which various systems differ (related 
with safety). 

[0057]The surveillance of the system 1 advances in parallel to the function according to 
regulation of the system 1 , for example, must not restrict implementation of these functions 
by consumption of calculation capacity. The direct reaction of the system 1 can be carried 
out to the result (an error is made especially) of surveillance. An error is stored permanently 
and can be immediately used for error analysis later. 

[0058]Diagnosis of an error is the component part of the surveillance which can usually be 
called via a suitable diagnostic tester in a factory. A possibility that the error stored can be 
supplied to analysis for example, corresponds to it. For that purpose, a suitable interface is 
required. This interface is based on the standardized protocol and can drive a suitable 
diagnostic tester. That is, bidirectional data flow is possible between a control device and a 
diagnostic tester. 

[0059]Diagnosis reads :a error memory which provides the following possibilities, The value 
of the input signal of the function of which c selection was done which reads the output 
signal of the function of which b selection was done (for example, the amount of sensors) to 
eliminate is changed (for example, since an actor is driven), and data peculiar to d control 
device is memorized (for example, series number). 

[0060]The calculation of a data row (what is called history data) which are collected over a 
comparatively long period and needed for analysis of a system behavior corresponds to 
diagnosis (data which offers development support). History data is unnecessary for the 
function of a system. 

[0061 ]ln this embodiment, the element of the system 1 is classified according to a special 
method. In that case, distinction is not performed between the methods (hardware or 
software) by which an element is realized. Rather, the element of the system 1 is merely 
classified according to the functionality. 

[0062]The layer model which has a surveillance layer can also be used as other following 
layer models as shown in drawing 8 . It explains below. 

[0063]As shown in drawing 8 , as for the layer model which has various surveillance layers 
of a monitor method, the complexity of surveillance increases from a layer to a layer as the 
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1st surveillance layer (lower part) UO to **. Consideration of the method concerning this 
embodiment is based on the predetermined unit of the system AA. In this case, this is 
functional unit AAAA, AAAB, AABA, and AABB. 

[0064]ln this layer model, functional unit AAAA, AAAB, AABA, or AABB considered within 
the 1st monitoring unit UO is inspected by the monitoring function UF matched with this 
functional unit in consideration of the input signal and/or output signal of this functional unit. 
Functional unit AAAA, AAAB, AABA, or AABB considered within the 2nd surveillance layer 
U1 arranged at the higher rank of the 1st surveillance layer UO, It is inspected in 
consideration of the input signal and/or output signal of the subsystems AAA and AAB with 
which the functional unit considered is matched. 

[0065]Functional unit AAAA, AAAB, AABA, or AABB considered within the 3rd surveillance 
layer U2 arranged at the higher rank of the 2nd surveillance layer U1 , It is supervised in 
consideration of the input signal and/or output signal of the system AA which the functional 
unit considered is matched and should inspect the functionality. When it has been 
recognized that all the functional unit AAAA(s) supervised, AAAB, AABA, and AABB of the 
system AA are functioning as order, it is presumed that the system AA is as order as a 
whole. 

[0066]As mentioned above, although the suitable embodiment concerning this invention 
was described, this invention is not limited to this composition. If it is a person skilled in the 
art, within the limits of the technical thought indicated to the claim, various kinds of 
examples of correction and examples of change can be assumed, and it will be understood 
as what is included also about those examples of correction, and the example of change by 
the technical range of this invention. 
[0067] 

[Effect of the lnvention]lt can be used in order to supervise the system by which very 
various complexity differs extensible easily, since the monitor method is constituted in the 
shape of modular one. Since between realization by the hardware of the function of the 
system which should be supervised, and realization by software is not distinguished in 
principle, the structure of a monitor method can be used universally. 
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* NOTICES * 

JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect the 
original precisely. 

2. **** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



DESCRIPTION OF DRAWINGS 

[Brief Description of the Drawings] 

[Drawing 1] lt is a block diagram showing the control device for enforcing the monitor 
method concerning this embodiment 

[Drawing 2] lt is an explanatory view showing the structure of the system supervised by the 
monitor method concerning this embodiment. 

[Drawing 3] lt is an explanatory view showing the structure of the monitor method 
concerning this embodiment. 

[Drawing 4] It is a functional diagram for the 1st surveillance flat surface of the method 
concerning this embodiment. 

[Drawing 5] lt is a functional diagram for the 2nd surveillance flat surface of the method 
concerning this embodiment. 

[Drawing 6] lt is a functional diagram for the 3rd surveillance flat surface of the method 
concerning this embodiment. 

[Drawing 7] lt is a functional diagram for the 4th surveillance flat surface of the method 
concerning this embodiment. 

[Drawing 8] It is an explanatory view showing other structures of the monitor method 
concerning this embodiment. 
[Description of Notations] 

1 System 

2 Computing device (microprocessor) 

3 Memory device 

4 Sensor 

5 Actor 
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UtiH^jSiORUgSr^tfSP^-k^WbTV^. EBM- 

[0008] 

[%0H*^^LJ:di:-ri,^S] ±iaM^ffi*^K^ 
k^Sk^olSJH^'ibS. 

[0009] Z<nX olz. 4«BK:ie»SnTV^Ka3 

y-ZtsAT-M.comfcnmfclztt&Wi&Z k{±T-#^t 
^. :<%»!), X7-^Bii*Fii^^«^3HR*>afl 



(4) gfl2003-76582 (P20 0 3-76 582A) 



[0010] LfctfoT. *»**>B«M:. /N-h'^i 
TfctHW* i k *< . fB**»o»«fc:Wt«rflMBfe* 

kfc*>6. 
[0011] 

[gljSSrSf^-t&^^g] JJ5«H*JIRfer 4^: 
*>. *SHH««l<o»^t:*JV^Tii. x^fA ( l > « 

^ < t i i otf)Tffitii § n/iif^ ^ t- a * ir t 
Tfe o , au r /x«±G^iaasixfc>'^xA ( 6 > <r> 
mmftx'h~>x, a^uE^-fA < 1 > 
{ 4 ) , ( 5 ) mt/ximmmm. ( 2 > * 

A ( 1 ) <7)A7JfI^, aj^fl-^&l^SK k fc imm 
fgiX-y h£imi-&ZtiZ£iX, WfA(UO 
«ffitt£IS»*4:*ri£T*-5'C. bSIExXxA ( 1 ) O 

fc*J*5r < k h 1 owrr^-r A«K£4HWS;h.. *>o 
iirie-9-r^-r^m#§ fctc^KK k 1 1 oomtEx 
->y Mc*HWS*iT*$9, At/. tHE#83i. tlTOi 
3fc«BMS«5iiTV^ft : -SSIOESUI (U0) , huIB 
m 1 0>BW§[*rVi'A J rJ» < 1 ) 0«|g^---y V<7) 1 O 
li*f2«1igxx v htf>7Jjfi-9&tf/Xl±aj:fc«-*£ 
#*tT«aESii4. -Mia^ioi^lJi (U0)W± 

atE«sfut»2<oiaw (ui) , mnsm2o^ 
JiWT- tat aw&a- » Hi. $ 6 c , mwm&z-- ? v 

jjm^z%m.Lximzti& , -Hoism2oEiis <u 

1 ) *>±ffifcKB3fufc. k fc 1 owffecDgtSIB 
(U2-un) , i«nefiog£««i*i-ciatgi-»/hJ±. 
zt>iz, itie^xA ( i ) nx-ftm^&v/xit&ii 

[0012] JJEJBR^IMBTli. Effi»^a7 

*>fcftT^*<0T\ SSfti-^Ss^Xf AtioTSSgif 

/u-rWWHW ) <7)3IJ£$ iz l>{&& LT ^b . 
[00 13]**:. KfcfiF**^*5-*fcU *»o 

ajftftSfLTv^io-c. £*k LTKa^ffi^Hae-c^ 
»s»^«Ba#» ^ , fimc =t o ^ < x— «r t£it 



mcotm^mK^mtt, ij^mLKtrntb^ta 1 
5 . i,x^j>c>MffimzmMtzwk{t-tz<7)tfm i 

[0014]**$. ®«OS£iaSrtT^#g<9l£*f £k'<7) 

[0015] RS*-^& ^-Xfi^iSCi^<M 

^yKEBM) -««rc*4. ^fA8i8li 
<ki>lo^-if^Xx^«lgt^S!I$aTtj , 3. m*. 
?na>}Zx.-?XliWfc*yW>mmb LXB 

4. L* J t, Ztl$>commz-0\^XV7 h*> xTTHS 

[0016] T/^^fAKli, § 4>lc. k t 

xT-HMBtt (mif^7f'JySil/-y3V, ff± 
«8tv*- ^ y h < RSM) XlittftWrx^/^v* 
-^>-h (DYN) ) k LT, *SUiA-Hi>x7 

-Witt (Mitncaaje. «epj^) k LT®B£$n 
tv>i,„ &isXT£.cr>Mmzm-otz®m<7)&mzi l zvt'> 
x, z<7>ttmim(KWLim*mi-tbztizx->x, $ 

k 1 1 -5<oaM^«fiBfc:iiflW4 i k *<r# . Zti 

g^eHXtiHft fficofilig k LT . ft 4 V Hi x * U- ? 
SSmElt^k LT^«-T4^ k S . 

[0017] micoEffiSfrbteix, zmcoimzii 
comm^-- f ^ a . ts^ -y k <^xn^mf/x\,t 

tti^ifi^ (BP*>. #Sf§nS«Stgxx-y N) Srfflv^T. 

ZmZtlb. ^2<7>S^StZfcV^-C(i, !StgXX.yh 

ii . S d> iz , ti b mtJ-- y h jWJ6 Wt ^.ixT 

tm^xmiztib. 

[ooi8] i/XT&w&w, at i cownmcoTii ic$ 
^zfo(r>mmtt^b%i$ (Miimm^--yh0)T 

TfWttSfig) tc*i. JBloiasacfev^-Ctt^f-A 
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/xn&Jim^im^x, m&ztiz. tonm4com® 

iztchiiz, *%mzm^<^-fr&.<r>mmi>%ixts j r 
[ooi9] t^. mm&3-~v wtfmt, mm*. 

V/Xlt&jimmfi&jzi&t: ±0 0, h 6 \ ^tiS>JMi£ 
T®&Ztlz-o^XW&ZtthZtlz£*)m.?rZtl, R 

±eo. $>z>uim,bm*T®z>ztiz^xm£ztL 
hztizz^xmnztih. im<mj$.-tz><r>-t}W£L 

[0020] £tz , fulMi-f'^ yAfi ( 1 ) com 

immmnmxxitmwzmmx h y^is-vx-mx-h 
i». ftijoii^v Mcfcwcte, m^z&m-fZKfr 

i o o 2 1 1 Htrie«8g*-y h onmmzx.7 -& 

tm*^Lx^z>i}\ hh^im<?>mm->v httzox- 
hzmzmtxitw^tfrnRzixh. n<mm-th<o 

ioo22]*fc, iaKttS#gM4, ftiMm&v/x 
[0023] tt:. miumn, Hflis^xrA ( i > o 

^TO»|gi->y M3MJS*l4. *D<i«t6^**» 

[0024] ttz . mi>-Xf-M.(0±X <7)mi&3-- -/ V 
tftffiZ& Y )lZ®&LX^h%£\,Z, HUie^XxA 



tus. mcztitiwrnz-- •/ h <o i o*>wa o custg 

&#3Si--yh (Mx-7M fcSDiT. ifcSVMi* 

[0025] is&mimkt&ti*). *m&&2e) 

«j£(=j3VVCtt. -/^fA ( 1 ) tJ^< fc tlOWT 
ffi{cE«S*ife-9-7'^^7 l A**L. £.t//Xti±{4^ 
EUSftfci'.XxA ( 6 ) Wl»T&-)T, miis 
Zt-J* ( 1 Hi, -k^-t (4) , 7??- < 5) 
X(itS«gftlWS ( 2 ) £H-t^- K^xTTHSSftrt: 

miie^x^A ( i ) mtsm 
x, Mie^-^xA ( i ) cDMmzm^tzm&te, mum 

Kju=.^ h tz*SiJ?ix, 1 (UO)rt 

t'i±, i/x^rJ* ( i ) £7)^sgjL^-y hf>i*>&. mm 
« ; -i5Esi i ^smii ( u o ) <r>±.mzmwzti 

fc»20KSJl (U 1 ) rtTti, lirie««gi--y Mi. 

s maw^a-- -y h \,znmmhtitzy-?isX7- 

-m2^ms (u i ) cr>±sciEa$a^^< t 
l^cofso^m® (U2-un) i*re. H^teatgi--/ 
Mi, §<>tc, tffie^x^A ( i ) nxnm^AV/x 
nni^m^^mLxtm^tih , ;^#stt5y 

[0026] ±ISie®^fS^x-ti, SS*S«y A5 

ox- , * £ t *»? * * . 

[0027] ±reaiiyiS:»»i-6^«>. *^ B JO 

1 JSfcSEtt^ftS- H^-r 5 £ k 3 y t a- ^ 

A(l) 0«ttgttS:!afif 4*HI<0fett<0>t'J*^*< 
iSftSfil.. ^ ; & , J^±^(ir7>'b-x-^Tnj7'7i>, 
fflMtlZtiXtS*). %<nzi>\L°i.—?Tv7?Mmn 
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C 0 0 2 8 ] JJERHSrWfc-f *fctf> . *WH*>*4« 

[00 29] mittyv^s-TvfJMt, * 

*0m=F (3) fcfgffiSivCV^. *D<«W»-*Kf, iff 

£ y - >- y — * ^ y , 5 >yi±T7 nrx^ =& y x«± 

5. 

[0030] JJS!ll«£tf$frt-4*:*>. *i^g5i7) 
fWitcfcv^Tli. S'*^ AI42>fc< k 1 1 -*9TtfcfcIi 

tlfz-sXrJ* (6) *>o*>"f 
( 4 ) , T7 ( 5 ) Rtf/XlitW»ttHI ( 2 ) * 

frie^xxA ( i ) oATjfi-t, ffl;Wt*»tf 

h, y^fA ( 1 ) «0«8i&ttS:E»r4igKt'*or. 

iue^x^a ( i ) nmfeizfeitmmit. mmrnn 
mttz izmtx^mmiz, 1 1 1 owryxt 

-MM6WHW§*i. **o*4>fe^fir< k i 1 mm&J- 

EP*> : -lifiB^^x^ ( 1 ) OH8tgi--y h<5Dl-? 

#*LT«l**4*l*>E8Hi (U0) W£R: -WE 
ffl£3L- f h * . S 6 C . W Ctntx^. -y V KfcfJfcWt 

it LTflEtet* . BtriEB i comus < u o ) o_httt=K 

■3*ifcft2«>B8j| ( U 1 ) <tt£«fc , -tJK««P. 
-•y Mr, 3 fTIE^-f^ ( 1 ) <OA2J®9-&tf 

i ) <7>±ffifcEsr k fc i mmnmmm 
(u2-un)om, s^rri, -rkSr^k-r* 

[003 1 ] ±ieiEB20%BjT-{i. BUa^ya7 

-«ti(KSftT v * & «rs*'fcaa3PTi(rr * -> x , 
mmmz, stt^^ y^f k 7 x n: 

=fc &mmt V 7 h -7 x Tie J; SH^kOSSrSSOU^v^ 

->xmm-th^ttfz'th. *tib\t. mux*?*-/* 

3TT*YX\m<r)W& : ti'3.-!VttLX^ 

«i4ck. $> h \ *i±»/mb zTrnhztiz^xms 

•tZtzMZ, Ztl^fktfitm*ZG~fZ>Zti>X'Z 

* . z^i^izitm&teAJjm^RV/xiiiii.jjm *o 



[0032] 

*J. JMHWfc&tfHilfteavvt. H*Wfc:lRl-tf>«86fll 

[0033] (mi (Dmmnmm ) t-r. mi tas-?^ 
■owcsrar*-*. mm, ^qbkb^*****^ 

Ax^Otit^Oil*ai£S^fil££^-f 7o -y J? ST* 
[0034] t-t. m 1 iz^-tl 5 fc, al^ttJBJIRK** 

Ha»Wllfc:3&»*»i»fllttSrlS«r & £ k #T'# & . Wff 

gini 3^*ltjd0. u*t 

li» 4 L < {±«MW^^ * 'J IK* k LT , Wicffi^VTK 

7&»oro^7Apr^y-H^yy-^^y (epro 

M) bLXJ&f&ZtiX^i. 

[0035] vm? 3±cii, m«m 1 <otfws 
js^nss-rs o^jff yt* -?7d/7 A*<iatt 

LX&fcZtiXi^z,. tfnmm.2 ±X'ay^jL-^yo 

tttizRtx x*vmT3fr tfts^a 2 cea s ti 

5. 

[0036] ■3>t'*-?ya?7Mzii. mw&m 

iz&fr&&ffijm<mm<m&tt.WVTc?>i:olz (IP 

0, Ul. U2-Unt=4HHS:h.$i3fc) . ^ffi^^ 

[0 03 7] MMatlU. *y-9-4WA7Jft-*§-£t# 
T, JtS7J^2rT^^-5^{iJ7J-f-S. UiAIfti, M 
1 <o«SEt:«o fc«gg&»fc"fi k fcfcv >T . ^ 
? oro-fe -y-t 2 rtt'^l— 7RV/XlimJ\s-Tffl 

wzim-t &fmftx'*kj$&ti&. m^-rmmRx// 
xjiW/u-nwflrrn^^Aii, mate. saHwtaei?) 

^ J &y^3tc1 ; §iH*lL.T, SOao^ibC^k tt, ft 
& i k ^'T-^ * . *^3BBJBtC*»*»4fiiR*ffi*iaW 

^■-rs^k^r^s. 

[ o o 3 s i xmammizfrfri isZT^mm 
&0m3Tmzr>\, ^x , m 2 -a s tcs^v ^-ciawt 
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[0039] sm-r^ 1 vM&zft^tcWffi 
z, zcox.)s*ybt,z'frmix%jLx*-z>. mfc^is* 

^it^-MZii^X'ftoZt^&X'hh. 
[0040] £-f. H2^-riat, ^MOff^O± 
{i^IBS^ix^^T-Ati, n^AX'^tiX^h . ± 

A A T'^ $ iX & * "/f'JV^-^yb ( E B 

m) -»mb»*lth*. 

[0041] EBMHW»§&«AAOfl&fc:. §^.(3, fflj 
£OyXfAABtffiA(OMSfmS. fl&cOj'X'f- 

AABii, mttf^yisymvmWibLx. xitbyy 
z$vis3y®mmw.tLxm®.ztix^z. ebm- 

ftJffl&SBAAli, 20W/y^fAAAAi:AAB(: 

§^{i^^';*^3t LXB&zttx^z. m<v*>XT- 

iABIi, t^fAABAtAB Bfc#fJ3 tiX^ 
5. 

[0 04 2] t7"yXfAAAA, AABli, 
t(7)a-7t-AAAA, A A A B , AABA, AABB 
iZftmZtlX^Z. ffi^^xAABc01f7'^ 
^fAABAtABBttiStS. «y hAAA 
A, A AAB , AABA, AABBti MtlXn±Vfii 
?^-y7yh (RSM) tLT, ^figjW&X* 
^v^-^Wh (DYN) i: LT^ffcSftTV^. 

[0043] -3-— "/ h A A A A , AAAB, AABA. 
AABBgft, ZmSHMZttrnZtlX^h. XX-yhA 
AAAIi, gfcfrAAAAA, AAAABWAAAAC 
t^S^iX, i->y hAAABJigfcfrAAABA, AA 
ABB&tXAAABCKfl-SlJSftTU!,. ^ 
•vSAABAIi, gfcfrAABAA, AABAB&t/AA 
BACl^SiJ^ix. a-»/hAABBIi, gC^-AABB 
A, AABBB&VAABBC(C#flJ£ilT^.&. 
fc. ff!j<7)>-XT-AAB<^1?-7'^^.T-AABAi: AB B<7> 
X-vhABAA. ABAB, A B B ARZfAB B Bfcl 

[0044]f-5t, S£Jl-f ^£ i/X-y-JxAACOm&Z 

feiKmmu. m&^imzizft^xmmvmmMiztt 
mztixi^. *%k<r>%mmin±, mnbx±mz {^x 
taaaf«3) mit>tix\->h. ~>x7-j>mffiiz. mtif 
^Wjr/\'7fy7^-^>h (ebm) -mmxh 



m (t/y^fAAAAtAAB) (C#£J$*lT:fc 9 . 
ffii:LT^fi£$ftTV^. 

[0045] ^y^Xx^^ii. &tzZfl?iX')?-%< 
ttlOOif^-'yh (jL-.yhAAAA. AAA 

B, aabas^aabbo kz^^ixxa^ , Ztl 

{iV7b7xT««g1£ (A'»/f l J^al/->'3y, t? 

Lxmazzttx^z. isXTj><r>mmcr>imz t« 

x- ■> h t $ fefc^wflr < fc 1 1 ^wmimtztiV)rt& 

ZttfX'% (^AAAAA, AAAAB, AAAA 

C, AAAB A, AAAB B , AAABC, AABA 
A, AAB AB , AAB AC , AABB A, AABB 

b, aabbco , ■ttiimwtcW.ffi.-fj—i/jyb 
iz&^xi*tm%E.ftm<r>mmt lt, a* wis/** 

[0046] 03*^181:1^^, %mtm 

f&izfrfr& m* nmsimiirrz m^Mz^xim 
H3{i, ^mffimiz^zmtzmnm 
xffr&K-ttiwmviii. tea, $mimBi,zfrfr& 

[0 04 7 ] 03(^fJ: 7l:, WfAAA, ABO 

*ffiti, yXfAAA(7)FJf^a-7 
[0 048] ifti±, H4fc^-i5t:. a5#$lff£AA 
ABAT'ft^. JRKOKBflUOfciiVvC, ff^MSIgA 
AA B A(i, Z<V®#mffiAAABA<7>AJ}m*T6RTf 

4>nfeisa«iBUF AAABAfci-3-c*ac$n*. 

[ 0 0 4 9 1 SS 1 <0Effi«U 0<0±fflfcEBSflfcaS2 
<0lSBMiUlH4J^Tti. HSfcjRfidfc. fWiMWB 
AAABAIi, S^K. «t&XX»/K-AAAB (#fg$ 
flS»»»aAAABA*«i*lfc:»Bfttt^ilTV^S) 
<0flfi<0SMJ-«MBAAA B B<7)A7:«^8S^/X«ai7] 
iS^9t=J:->T«BtS#l6. fl&*5«MMWlAAABB 
(4 , fL4 JWMB8BA A A B A t PI -y h 

AAAB(7)-^T'3b2>. 

[0050] m2V>%ffi3\J 10)±mzmi2tLtz&3 
ol^Ulu 2 rtTtt. H 6 izm- i 0 *C. «*«MBA A 
ABAii, $4>^, iSa^yhAAAB (KS"t4IB5 
A AABA#: ilKStJCft »t ^ilT V > I, ) fc ti» 
*««tB3.-*y hAAAACDA7JfI-^l 0RV/XI*£ 
7J«#1 1 SfflV^T»BlES*L4. Mfci- »/ h AAAA 
(i. t/y^fAAAA^)- SPT'ftoT, 
^•Ult A AABAt: WW -r & *rC 

[00 5 1 ] m30S^BU 2<0±ffifcEa$fut*4 
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ABAIi, %&Ztl&UftWmAAABAtfjtf 
Kim tyftX Wh-WSsXf AA AA k J4R*4-9-7'^ 
Xf^AA B COA^Jff - ^ 1 2Rl/^XlttH,t)m^l 3* 
jflVvTfcSESil*. t/yXfAAABI±, yXfAA 
AW-SrC*-jT. **E3#l4«#«tgAAABAfci 
Ov-^.-rAAAtcS*lE#{tfe*iTV^6 . 
[00 523 ffiR^SffilSttU F^iiiB-rsSl^x-^ 

hc7)BJr^<7)**^filtt (#R{i1Eib:fiSESEfgt$) 

U *»-3^*^IB 5 5rL , Cfi!iolgSIMBUF<D^ftfc:S 

ftro h a/isZttxommi&iJ f twnffl-t* c k #t 

[0053] *3IWKBfc:*»5&»6Sa*ffi{i. fflB*)^ 

xfA±t«fflt & i k * { T'# 6 . «k t n^-r 
\z, x?H^J:91B*fc:3M>*£k0 t T**. 

[0 0 54] ^-fAl<^|£«fcW*ftfi5aBUi. ^ 
-?yXfAl*«t(i J ^« (Specification) 

±SgT'#> * k *ufc x^r Alcfe t >T <o Ales* 

[00553 z^mmiz^^x, m^itta, -sxtj* 

it, mtif t1HmLtlifc&cr>££ (7x-f/Hr-7 : F 
ail -safe) j, <" X 5 -§*p<g!I£M ( f a u 1 t 
-to l.erance) j , ^m^}^±'&. ( f u n c 
tiona safetey)Xli r $flf5i^g(i 6 V fc 

2 o vofao&i&wEfcouTsresixr i3hotkj 



[0 0 56 3 Ztlhn^mii. ZisXT-MZIUXm* 

■ox^&coz'. *mmmizir>frttm<?)£o[ l z. %m 
mztffiZE&z^-zzrw*. m*commt:ii-t&&* 
KisxrMz&mzmmTZ zztz^mt l-o>&. 
ztin. ttiizmitzmmmmZimtL, ^mmm 
m±, i^«yxfA# (3&mzmix) Jt&ssft 

ffiffl-fl.C:k* s T'#l>. 

[00 573 yXfA 1 Ol£iSt4, ^Xf-A 1 coMMiz 
v\ i^lo^m (^cx^-) £. i/Xf-il I41S&K 

$ixT. mmtz. t)h\m&iz^7~ftVr<otzibizmm 

■tZZtifiX***,. 

[00 583 ^y-comiit, iBffi. X*rtTff»fir» 

Brxx ^^^lt nf vm-r z k #-c# & smoai 

4x5-*^Wfc:«ffr^* i ktfTS 4 "TKttT**. 
O'V^Tfc*), *JS^Bi^X^-^iEU)-rS^k* J T# 

[00593 ^Bf{4. JaT<0TiI1ftfi«r«tt^* : 
a) x^-^t'JSr^fcllLT, ?l'*f-2>, 

[00603 zt>iz, Bmizm^-tiote, imw^ 

lz<m k $ ix & -r- ^ ?iJ ( v **>ty h b x h 'J -x- ^ ) 

«5twr» s ( ransat-r h?- 9 ) . t x h y -f- 

[006 1 3 *HSB»JBti*J^r(i. y^fi 1 cog* 
Ztittm (A-K7i7XliV7h')i7) OHT'E 

[00623 mmmz-g-t&m^TMi., msiz^-rx 
ot,z, m : co£o*m<om*:7 : n'k-rhzk.i>TZ2>. 

[00633 118(2^ «t 3 KE«2rfc«0»**>Kl& 
WmiZfrfr h -ti&n^mt , yXfAAA^OX- 



(9) H2 003-76582 (P2003-76582A) 



hAAAA. AAAB. AAB A. AABBT&S. 
[00 64] frfr&M : Z J rMzt5\,^Xli, IltO^Sa 
-•yMJOlTC. %mZtlhim&3--'y NAAAA, A 
AAB, AABAXtiAABBti, dO^tgi^-y 

>y h£#J6ftttA>ftfcl«»«UFtCj:oTt«Sft 

i> . m i ogsui u o tcisas ft;tm 2 oiaae 

Ulrtt, hAAAA, AAA 

B, AABAXIiAABBti, Sfcfcl. #3g$*l&«SSg 
jrr. -y h tfgf J&tfl76ftT ^6t7"xXfAAAAXtt 

[0065] Sg2?)KtS«U l *>.Lffifc:|HfSftfcSS3 

cvmmmu 2ftx- , zmzti&mtfc^y naaaa, 

AAAB, AABAXIiAABBIi, § #S?£ft 

-r^t wtaa AoA^ft^sy/x*iffi^fi-f-^# 

|gi--yfAAAA, AAAB, A A B A$££AAB B 

#. ftJfaot«SttUTV^ci:36*BliSftJfe«^fc:. 
A A Al±£flsfc LTf&f K> X'hh bimzti 

1>. 

[0066] i^JLb, *«BHt«6iSF»fWfc<^railfcO 
WC Rag . *S»»±Wp' 6 IRJ£ 3 ft=Sr v > . 

a«#T*ftif. *«m*:oKiati5a$ftfcs«Js» 

t*»«o»IB«iBfc:fi*t5ft4 tot TP £ft& . 
[0067] 



-t&ZttfX'ZZ. 
[Bra5^)M**R^] 

[01 ] *ltlBWBt3&»*»4ISa*ifctlltt't4fe«>W 
[02] ^SI|gKBk:*>*»5lsa*»tJ:->-C8IS$ft 

[03] *at^{C^61^*ffiOl«fiS:5^RBB 
0T'$>£. 
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